mozilla/browserid — Issue #490: "keep me signed in"
Author: lloyd
Created: 2011-10-26 18:23:24+00:00
State: open

The user should be able to stay signed into a site if they like.

At the time a user selects an email address to sign into a site, they should be provided a checkbox that they can click to choose to stay signed into the site.

This checkbox will cause assertions to be automatically issued subsequently, without user prompting.

This feature will require UX feedback, and new APIs. Specifically, getVerifiedEmail() is no longer sufficient, as with this new feature several things change:

* it becomes possible to get an assertion without user interaction, something that can occur outside a click handler (ben adida suggests adding an 'immediate' option to the *getVerifiedEmail* call, lloyd suggests a new, distinct function)
* there must be a user discoverable way to undo this setting (now, if the user clicks logout on the RPs site, the RP needs to tell browserid to forget this setting)